Static task
static1
Behavioral task
behavioral1
Sample
f7ec773b83f191d9bb7687fa7711a0af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f7ec773b83f191d9bb7687fa7711a0af.exe
Resource
win10v2004-20231215-en
General
-
Target
f7ec773b83f191d9bb7687fa7711a0af
-
Size
741KB
-
MD5
f7ec773b83f191d9bb7687fa7711a0af
-
SHA1
788b9b1c761d0dba0cfffcedb024b21fb3bb83f0
-
SHA256
2cfd0ba69d659886cab684a10340c372e0ca70f4464cbee3594e3a3773990d1b
-
SHA512
47d27fde9977b6d33487b3decdeb2f650fd50b26276fb05fbdc56ebcc2eef29b78aebcc3aa1bc2ac41041bc228b5650a2369e7aaae5b24acdf400a36f3668448
-
SSDEEP
12288:9dCTNnDAz4TeAlST4a+RNL3XimDutPoHCGVY1nIDIPN5Wo88uCHUSQigXU88ftq+:mJf34T4a+/OxQHjVUIDYn/FuClZc8ftt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7ec773b83f191d9bb7687fa7711a0af
Files
-
f7ec773b83f191d9bb7687fa7711a0af.exe windows:4 windows x86 arch:x86
37d8ce62d9818da26f88d85a39910080
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetEnvironmentVariableA
AddAtomW
CreateFileA
ExitProcess
InitializeCriticalSection
HeapCreate
WaitForSingleObject
GetFileSize
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetStartupInfoW
ReleaseMutex
FindClose
ResetEvent
HeapDestroy
FindClose
GetTickCount
HeapSize
SuspendThread
GetSystemInfo
GetModuleHandleA
CreateMutexW
SetEndOfFile
wininet
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FtpOpenFileA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpDeleteFileA
FtpGetFileA
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpPutFileA
FtpGetCurrentDirectoryA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 735KB - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ